Results 1 to 2 of 2

Thread: Moving SSH from external IP to internal IP

  1. #1
    Snakebite is offline Starter Member
    Join Date
    May 2010
    Posts
    2
    Rep Power
    4

    Default Moving SSH from external IP to internal IP

    Hi all.
    I just installed ZCS on the CentOS 5.5 machine. It was easy, without any problems and now it is up and running.
    The machine which run ZCS is also used as gateway, proxy, firewall and webserver.
    Now i want to be more secure because i'm in production, so i decided to move SSH from the public IP, to the internal IP and also on localhost to prevent any possible errors from ZCS. From the moment when i put SSH to run on the port 22 over 127.0.0.1 and 192.168.x.y ip addresses i receive this error:
    Server error encountered
    Message: system failure: exception during auth {RemoteManager: mail.mastersystem.ro->zimbra@mail.mastersystem.ro:22} Error code: service.FAILURE Method: GetMailQueueInfoRequest Details:soap:Receiver
    When i put it again on the public ip, everything works fain.
    So i'm asking, if the SSH can be run only on the ip address which correspond to the MX registration or can be changed to any ip address from machine?
    And.. how can i make this whithout getting an error?
    I followed the procedure described here Mail Queue Monitoring - Zimbra :: Wiki but whithout any results.
    Question: Can i move SSH on lan interface and how can i do that?

    Thank you.

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Quote Originally Posted by Snakebite View Post
    Hi all.
    I just installed ZCS on the CentOS 5.5 machine. It was easy, without any problems and now it is up and running.
    The machine which run ZCS is also used as gateway, proxy, firewall and webserver.
    You should not be running your Zimbra server on the Gateway/Firewall/Proxy/websererver for you LAN - you will end-up with problem.

    Quote Originally Posted by Snakebite View Post
    Now i want to be more secure because i'm in production,
    See comment above.

    Quote Originally Posted by Snakebite View Post
    so i decided to move SSH from the public IP, to the internal IP and also on localhost to prevent any possible errors from ZCS. From the moment when i put SSH to run on the port 22 over 127.0.0.1 and 192.168.x.y ip addresses i receive this error:

    When i put it again on the public ip, everything works fain.
    So i'm asking, if the SSH can be run only on the ip address which correspond to the MX registration or can be changed to any ip address from machine?
    And.. how can i make this whithout getting an error?
    I followed the procedure described here Mail Queue Monitoring - Zimbra :: Wiki but whithout any results.
    Question: Can i move SSH on lan interface and how can i do that?
    The only thing you should do in these circumstances is block ssh at the firewall. If you wish to change ssh to a different port then search the forums for details. I'd strongly advise you to move the Zimbra server to another box inside your LAN.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Internal Ip address Showing in Mail headers
    By emmaylots in forum Administrators
    Replies: 16
    Last Post: 10-09-2009, 01:05 AM
  2. [SOLVED] Adding XP PCs to a samba domain...
    By NoDoze in forum Administrators
    Replies: 43
    Last Post: 08-13-2009, 04:22 PM
  3. Internal + External Domain Questions
    By Markus23 in forum Installation
    Replies: 1
    Last Post: 01-22-2008, 11:52 AM
  4. Another DNS Thread - Internal and External IP
    By Mo_Hong in forum Administrators
    Replies: 4
    Last Post: 08-31-2006, 09:40 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •